Morning Edition · Friday, September 25, 2026Published at 1:49 AM EDT · New York

Blockstream's Liquid Post-Mortem Traces a $320 Million Loss to a Cached Proof Check and an Unshipped Patch

The fix for the Elements bug was committed publicly five days before the attacker used it, and no production node was running a release that contained it.

Blockstream has published its assessment of the Liquid Network security incident, the 6 September attack that moved roughly 4,000 bitcoin, worth about $320 million at the time, out of the federation wallet backing the Bitcoin sidechain. The…